fix and config security