Central security

This appears to relate to the client-side part of the security stuff.

@nealstewart