Add extra privacy setting and add security rule for profiles