config security restrictions