Security considerations for notifications