more tweaks for security