`move` action disabled by default + `move` action security warning