security: fix pedantic compilation