Which two options enable security group tags to the assigned to a session?