separate the app security bits