fixed security example configuration for the /_internal prefix