security config stithed in