docs: remove references to security=server