Readd api stuff in security.yml