test with security context set