added a default security config