The "lock down Django" work is mostly done