i am not sure if this is secure enough. Think the add methods to a `(string)` change, but is that enough. I think this a downside of not using an object.