Fixing security config to include group membership