Documented applyUserTransforms in security.md