system_config is now security_config