Use scoped security context instead of adding to top-level.