add security to alimentation api