user can change securityMax