security work in progress