secure privilege on the endpoint