- changed security defaults