> I thought the -security branch for sup was dead. i.e. no need to a separate
> dist anymore.

Yes, the "security" release for sup was dead.

> Tonight though on my regular sup the entire crypto tree
> disapeared during the allsrc and reappeared when my old security sup
> kicked in.

This was mistake, and corrected now.
The "allsrc" release should have the crypto tree, and the "security"
release shouldn't have it.

Please remove the "security" release from your supfile.
If your supfile preserves the "security" release, the crypto tree
will be removed again on next sup.
Sorry for inconvenience.
--
soda