use real realname; moar command test on security