security-related notes