remove static dependency on security settings in crypto API