add security attribute to support multiple protocols