Confidential matters should only be discussed in secure locations, the ASIO deputy director-general said.