relocated "sec" stuff to configuration