#3296 added propagation of security context to XML and JSON function calls