security tips for vendors