This “security reason” crap is becoming a bit commonplace and an easy option for clubs that don’t want to welcome visiting fans. When a club enters a competition they are aware of the rules. If they cannot stick to the rules then they should be kicked out of the competition. “Security risk” implies terrorism, bomb threat etc, not we don’t want away fans.