this is the latest code in Feb10, 2014, it could detect duplicates, and it could find out files that only include sensitive operations but does not include require_capability or has_capability checks