SecurityActions classes should not be public