Hi, The way virecover currently works is problematic for security (see the recent nvi commits). I do believe it's possible to achieve the same with much lower risk by rewriting it, but as I don't plan on making these changes, I'd like to propose an alternative: disabling virecover by default. Thoughts?