Assume that all services can have their own security attributes