I've added a new config param to enable/disable security. <enable-security>.This defaults to true.This allows for some performance improvements since extra lookups are avoided.
Ive added this to the documentation