added service security api
added ability to explicitly wire routes that declare themselves as 'jiveLocked' -- validate jiveEXTN header automatically