Change the regex validation of security variable so that it only match z1 to z20.
The previous regex allowed z29, for example.