update security examples

some typos, fix handling of whitelist/blacklist