first enable security