Warn if HTTPSecurityPlug is disabled