bytemessage and xml
empty securityinfo deal