tim_smart: is this secure?