some security tweaks