Move "security" package to "service" package