updated security section with aliases and form limits