Fixed typo in security.yml paths