initial implementation of opac security plugin