create the security vars