reducing security config to minimum