I think you are right that I need to give a bit more guidance on this solution. Security 3.2 M2 will be out in about a week at which point i will be able to focus on these two JIRAs. Note we will be certain to get these issues in M3 which should have a much shorter iteration than M2 did.