some security advice, exploit prevention