security tweaks (knp menu and @security)