tidy up SECURITY:HOST_BASED, USER_BASED meta-knobs based on ZKM's input #4031
===VersionHistory:None===