security adjustments for ZIP conversion flow