manually add back secure flag