We study mechanism design in a setting where agents know their types but are uncertain about the utility from any alternative. The lnal realized utility of each agent is observed by the principal and can be contracted upon. In such environments, the principal is not restricted to using only transfers but can employ security contracts which determine each agent's payoff as a function of their realized utility and the profile of announced types. We show that using security contracts instead of transfers expands the set of (dominant strategy) implementable social choice functions. Our main result is that in a lnite type space, every social choice function that can be implemented using a security contract can also be implemented using a royalty contract. Royalty contracts are simpler and commonly used security contracts, in which agents initially pay a transfer and keep a fraction of their realized utility. We also identify a condition called acyclicity that is necessary and suncient for implementation in these environments.