reworked security model