If the assembly implementing the custom security object references other assemblies, you must first add the referenced assemblies to the full trust assembly list.