typo in security constraint