Add security.management.enabled flag