Secure /app/init

(not next)