Managing security with workflows