Reflections on the RSA guidelines