https://5dok.org/document/wq2peley-making-the-distribution-subsystem-secure.html