protocol security best practices