Add Webroot to security.yml