development: shSecurity has defaults set to variable