more description on security model