3.3.2.3.2 Specify Security Settings
If a higher-level protocol wants to use security for its remote procedure method calls, it MUST supply to the client-side implementation of the RPC runtime information on the following:
What security provider to use.
What authentication level to use.
Any other security provider–specific information necessary for the security provider to function.