cDOT security best practise reference?