add keymgmt back into sec