https://blog.mainasara.dev/posts/explicit-security-better-than-implicit-security/