[Security] fix config