Explaining our server security practices to the client