some changes for security specs