Secure /app/init

return cb()