config: security_msg for duplicate email