wrap signed requests in security document.