department of cannabis regulation security requirements