add security annotations to requests.  X request name where X = public, protected, internal, or admin