Always sanitize `securedBy` into an object