[security] HDFS diff mode skeleton