secure: always removed