[security] Make the app optional