secure attachment with self

Could not connect to the API.