fix security for ci/collector role