cleanup security.yml file introduced in #40