update paths for security.