security improvements

it's now way more annoying to run the script, which must mean it's
secure now.