Add declarative security annotations to business logic commands