clarify security statement