doing enough prevent users