Include security_level in init response