Securing the WAL stream