Clarify user security settings