WebLion/Plone security: we're solid