give the user a "none" option for underlying security in the grant wizard. Closes #601