test... security.yml ignored