add security_source logic to remainder of cookbook