Proof of Concept: Introduce Extended Security Check Modules that are NOT run on the Admin Dashboard but on a new Admin -> Tools -> Security Checks page. The first set of extended modules check against conditions where .htaccess files exist, to remove .htaccess files from the core as they may or may not work on the webserver without the store owner knowning.
remove debug code
prefex sort function with tep_
new http authentication extended security check module