added note bout security