nested barrio with first secure layer