worker: replace security with csoc expiry;