allow creation/editing of security object