reworked the security provider, so now there is only one for both the commands and queries;