split client/server | remove 'insecure' package