VCPE depends on opennaas-core feature, which i guess will include all security bundles.