Thanks Maxime!

We should mentionsecurity: false here, but the best practice doc is about mentioning things in a concise manner 8to not duplicate the existing docs that explain each feature), and this would require showing some config example, explaining it, etc. So, better just remove this and folks will get all the details in the main security article.