handle non js calls in secure module