How to Implement a Simple, Secure SD-Branch