A Secure Object-Oriented Mediator: Two Challenges