add security-api dependency management