remove dependency on osx security framework