threat model
move model to file
blah