Understanding the security model