update security ascpects in purl header