step 6.8 - security simplified, removed unnecessary config