mxml: disable SECURITY_CFLAGS