PASS API presence in secure contexts