I don't see any config that user can modify. If I disclose it to the internet, how to ensure the safety?