Security capabilities and policy for transmission of payment