add security, but not work