On 17/08/15 06:03, Simon Davy wrote: > I think maybe there is a distinction between performance defaults and > security defaults, and defaults can be dev on the former, and > production on the latter, maybe? Agreed, defaults should be "correct and secure". Mark