upgrade secure mode to host-based ACL