players: add allowSecurity