parse security attributes in helper so they are given to aggregator