security working with local .mdf