Add security payload type to a request/response