enable slave to master access control
prevent CSRF exploits