Secure /app/init