Post type security for Wordpress