Item13001: fully specify security setting for REST