set security doc on medic app to public.