working my way through the security logic; its slow going and inelegant, but I am working through a plan