This ended up being a dead end and is replaced _in toto_ by QDL. It is now gone from OA4MP and can be safely removed from the security library.