https://zaykar.com/posts/security/advice-on-security-by-the-pcrc/