display attributes on create security screen in order (fixes #1238)