use released security api rather than local SNAPSHOT version