added on security notes