S-45195 Improved Heroku doc with security caveat noted