Service identity security requirements