1. A computer-readable storage device having stored thereon computer-executable instructions, that when executed on at least one processor, cause the at least one processor to perform a process comprising: generating security context data based on a security context provided by a tenant, to be transmitted through a multi-tenant computational environment; wrapping the security context data with a protection layer that prevents an ability to access the security context data by devices external to a trusted service of the multi-tenant computational environment; double-wrapping the security context data with a second protection layer that prevents un-authorized tenants of the trusted service from using the security context data; and transmitting the double-wrapped security context data to the trusted service.