At first glance that seems reasonable, thanks for the reply.

I've seen enough subtle security issues that I still wouldn't trust that despite it seeming ok, but it does seem ok.