clean security config