Secure flag issuing