architecting a secured data pipeline