Move the extensions to the conformance.rest.security level