Fix security server API argument validation