Yes. We don't understand much about security, but we have an "ad hoc process", which means we try to avoid a few bad practices if time permits.