Remove api stuff in security.yml