inspired by a comment of @henfredemars@infosec.pub