automatic: handle 'security' update_cmd.