bugfix: sec_label was copied without ending byte