configs, arm: add option to enable security extensions