I think Security / Criminality can start before the eligibility has been fully completed. I think the same happened to me (as per CIC agent, did not confirm with GCMS). Either way, Criminality is, as far as I know, the "easier" of the two, focusing on making sure you did not commit any crimes...