added "security" setting