add declarative security model.