Does the order of operations matter? You can make security-related changes while security is disabled and then make those changes active upon enable, or simply make changes while it is enabled.