defend against unauthorized access