This pull request looks generally good - if you revert newAppSec to its prior state, it's worth a merge.