Confidentiality is now only allowed on origin channels, Authenticity is only on destination channels.
Security generation now works on channels with different port names, and also on fork/join channels.
Also, a security testing model has been added.