_security stub && design doc attachment retrieval