invite-only security .cursorrules strategies