protect against watering hole attacks