security in FOSS