test on security, might not be initialized