idea how to secure service methods