force isCmSecurity=true since we are derived from cm
remove changelog from settings