end-to-end security architecture