turning security on by default