Make the composer installer set the Security.salt value.

Much like the old ProjectTask, the composer install script will set
a unique salt value for each application. A new easier to find/replace
placeholder is used as well. It is a terrible default and hopefully
encourages people to set it when doing manual installations.