When a transaction is routed via MRO, the user's ACEE (security token) is propagated from the TOR to the AOR. The AOR uses this propagated ACEE for all security checks, maintaining the user's identity across region boundaries. This is fundamental to MRO security.