Convert security transformers & fix TransformersLogger flushing

 * add reject expression transformers
ignore failing tests
handle cases where target hostname can be null