aagbsn has a useful security patch to torflow. i trust him not to push wrong things. can somebody make it so he can push to torflow? thanks!