should be wrapped in an appropriate SecurityAction