Fix #1: Options.secure now defaults to current security context