enable-secure-admin should have security=false