And the purpose of the downvote was because these things were never in dispute. It was never hard to find out that this was a security improvement which had been requested, but not yet implemented. It struck me as senseless to have yet another thread, when the current discussion is still active in more than one thread already. Surely it would have made more sense to link it there?