moved getClientConfig methods to SecurityHelper