Add security.xml