Managing third-party security