adding security + exclusion in tomee