[StepSecurity] Apply security best practices (#669)