switch onsa and cli commands to new header calling convention, makes it possible to pass security attributes painless through to the protocol stack