Default security to off, then initialize it according to the event