security: don't use printf() for debugging