moving security configs to secure code block to remove requirement for private key and certificate