How do we handle security issues in modules?