public Part updateAndGetSecurityPart() {
    // need to take care all message types here
    if (AcceptorImpl.isAuthenticationRequired()
        && !communicationMode.isWAN() && !requestMessage.getAndResetIsMetaRegion()
        && !isInternalMessage(requestMessage, allowInternalMessagesWithoutCredentials)) {
      setSecurityPart();
      return securePart;
    }
    if (AcceptorImpl.isAuthenticationRequired() && logger.isDebugEnabled()) {
      logger.debug(
          "ServerConnection.updateAndGetSecurityPart() not adding security part for message type {}",
          requestMessage.messageType);
    }
    return null;
  }
MessageType of the messages (typically internal commands) which do not need to participate in
security should be added in the following if block.
geode-core/src/main/java/org/apache/geode/internal/cache/tier/sockets/ServerConnection.java