[ian, kyle] testing security enable/disabled