clients were already accessing secio in one thread, but it's
safer to make sure it _is_ threadsafe