Now SU with security metadata is sent to the queue

Kestrel needs to receive the security metadata from the API, so it needs to receive the 'data' variable instead of the 'body' variable.
Happy birthday JL!