oXA mode in debian_secure