typo in security declaration