commit security question