security-events: write
This is not necessary.
Ensure that all workflows are able to write security events.