security: fix verification of parameters