The security profile specifies an <impersonation account="foo" /> element which references the non-existing account "foo".