minimize attack surface