it might be good to log at INFO level some details about the security set-up. That way people can understand the state of their job.