rest security work