The warn_only feature now works with security enabled.