legal requirements for security company