Invia SMS: On Refinement−Closed Security Properties and Nondeterministic Compositions