security header creation & parsing