+ security for static resources is set