The security services you use when logging in to Replication Server from the command line not only secure the pathway between the client and the server, they may also be duplicated later on in the session when Replication Server opens other pathways.
Replication Server logs in to the primary Replication Server and the primary database over informal pathways when executing these commands:
create subscription
drop subscription
create route
To secure these pathways, Replication Server borrows the security settings entered by the user executing create subscription, drop subscription, or create route when that user logged in to Replication Server.