security can now disable special $smarty variables
 see also NEW_FEATURES.txt