Category App Security Best Practices