manage bundle + configuration for security