Add client-side security factory interface and no-op implementation