reduce security risk