thanks, I had been arguing that we needed however, kept receiving response that since it was considered "secured" and not "public", we did not need to comply.