adding security misconfig text