security feat finished - needs some tests