add some comments
update security with list of available API calls for :register_node perms