How do I check what security zone a client belongs to?