add security config