secruity env setup