testcase for security config