set host-based acl as default secure mode
bump version to 0.0.16