They would. It's been a while since I've looked at the CETA language, but I don't recall seeing anything that would limit municipalities or provinces from employing a national security exception when required. It makes sense. There can be purchases by provinces and municipalities that can have legitimate national security concerns triggered.
On May 2nd, 2017. See this statement in context.