security constraints for start operation