No attribute security, at least for now
WIP