diff --git a/manifests/README.rst b/manifests/README.rst
index 50b5ad9..3970508 100644
--- a/manifests/README.rst
+++ b/manifests/README.rst
@@ -200,6 +200,9 @@ variety of sources.
 -  ``mirror``: The default aptitude mirror.
    ``optional``
    Default: ``http://deb.debian.org/debian/``
+-  ``security``: The default security mirror.
+   ``optional``
+   Default:  ``http://security.debian.org/``
 -  ``sources``: A map of additional sources that should be added to
    the aptitude sources list. The key becomes the filename in
    ``/etc/apt/sources.list.d/`` (with ``.list`` appended to it), except
@@ -243,6 +246,7 @@ Example:
         - puppet
       install_standard: true
       mirror: http://cloudfront.debian.net/debian
+      security: http://security.debian.org/
       sources:
         puppet:
           - deb http://apt.puppetlabs.com wheezy main dependencies
diff --git a/manifests/examples/kvm/jessie-lvm.yml b/manifests/examples/kvm/jessie-lvm.yml
index 1acfc35..d42c533 100644
--- a/manifests/examples/kvm/jessie-lvm.yml
+++ b/manifests/examples/kvm/jessie-lvm.yml
@@ -20,7 +20,8 @@ volume:
     root:
       filesystem: ext4
       size: 1GB
-packages: {}
+packages:
+  security: http://security.debian.org/
 plugins:
   root_password:
     password: test