Update security.yml & set naming_strategy to underscore