You can only secure types and attribute, e.g.
security.types.posixGroup.wheelOnly
If you have includeExclude=true:
grouperIncludeExclude.requireGroups.use