added security.hashIterations