#307 Extensions are not scanned by the security post-processor