Ali Ok David Martin Are we ok to create tickets for security or this is something outside the scope.
Considering that we move out of this area it's best to have at least option nr1 which should be trivial to implement.