Multi-turn conversation security context isolation