set maximum for entity expansions for security