security xml is updated with comments.