fix security comment #92