Security plugin: removing exec label restriction