See the SECURITY in phpgwapi/doc