security updates should map to true