Stubbing "security" calls