`VALUE_OPTIONAL` means that you don't need to pass a value when using this option, so `--security-class` is valid; which looks wrong to me. Again, any required value should probably be an argument and not an option.