log all security permission checks