Just don't break the core security tenets ...