fix circular reference in securtiy config