i might also recommend trying

./pants filedeps real-ns/bar/bar/common/model/security

in order to see if it picks up the desired files as per https://www.pantsbuild.org/docs/project-introspection#filedeps---find-which-files-a-target-owns