[security] enable mep