include dev security in ci mode