Item13001: fully specify security setting for REST

- some translation fixes
- better detection of image attachments