Modular Plans for Secure Service Composition