TransactionController.validateTransaction() throws SecurityException instead of IllegalArgumentException