Are there security best practices for each of these tools or is that too early?