security documentation enhancement

perhaps 'executed by the client' ?