starting one is easy, but operating it securely is something else ;-)