fixed missing secObj arg in validate_doc_update