incall security best practices