manager for security.yml