This library isn't secure by default. It should have the option to set the URLConfiguration to ephemeral.