removing security shortcuts from config.yml