ws secured via annotations