Create security.xml