add security provider if necessary