OO-1176: allow multiple items in QTI import
OO-1184: test the security callback only if there is an extension to protect