fix typos affecting security