General security practice (todo)