add security test configuration