You should add a file comment: `<!-- app/config/security.xml -->`