1.0.2
1.0.4 made it possible to block access to certain controllers with config parameter crm.security.controllers.blocked