With HFSSEC(OFF) is IBMFAC(BPX.CAHFS.*) checked?