add comment in securitySettings