add sudo file for security-config