keep build environment secured