How to Avoid IFS Security Mistakes