buildProvenance JSON returns whole security metadata including provenance which includes the so-stream