add security for device class api