Normaly, all these STCs should be defined within the CA Top Secret STC record.
If they start before CA Top Secret, then they will run with ACID *BYPASS* or +xxxxx (e.g. for LLA, +LLA, for VLF, +VLF and this is the case for all system adress space).
When they are defined in the STC record and start before CA Top Secret, they still run with acid *BYPASS* or +XXX and they get signed on the first security call done for the STC.
E.g. LLA should start with acid +LLA and then on the first F LLA,REFRESH it gets signed on by CA Top Secret using the acid defined in the STC record for it.