Method security rules incorporating returned values