for builtin security see for example https://unix.stackexchange.com/questions/102746/how-to-invok...