properties rest, security modules inject