handling security features for a single packet