migrate security annotations, please review