always set sec_code if it's set