improve security config