You should under no circumstances supply a mixer security list when fashioning an online buy.
You never want to cave in that selective information to leverage an token online.