How does method security work?