header.securityNeg == 1 is sufficient.