security & trust: fix broken reference