Comment 3 for bug 1590635

We cannot change the default, due to https://bugs.launchpad.net/oslo.middleware/+bug/1548280

However, I do agree that this should be called out in the security guide so I've added what I believe is the appropriate project for making that change.