Secure /app/init

why not an error?