add strict referer security level