docs - security configuration