spruce up security doc