This provides a small degree of security but also makes Velocity "secure by default", especially on shared hosts.