fix security config for places