[ILUG-BOM] need some cues for a security audit