rename security package to sandbox