Security is not "enforceable" if a required creditor consent has not been obtained