add security-util dep to arq