update security: apps cannot contact other apps directly