I come from security background and have been following best practices since 1997 so I’m pretty sure I have not made a blunder of this sort