only run yes_security or no_security specs in cases when we have configuration