How do we fix MCP security problem?