rename "readers" to "members" in _security object, keep backwards compatibility with old security objects"