add SecureString support