update the security.yml file