configuration security bug fix