added security spec