Making sure a SecurityException is always thrown when we aren't able to return an attachment.

Signed-off-by: Aaron Rosenzweig <aaron@chatnbike.com>