Resource and providers

security can be nil? add the check ("unless new_resource.security")