add security check on configs