1. If one enables the OWASP ruleset provided by cPanel, how does it affect the default ruleset in the module - do they run side by side, different numbering - and each vendor would generally use non-conflicting numbers? Or OWASP replaces the module's defaults when enabled via WHM? 2. The mention in the cPanel docs OWASP renumbered the configuration files in 2016. We strongly recommend that you update your rulesets How does one tell WHAT YEAR is installed - or which version - and can you include mention of that corresponding version number as well in the docs, please? 3. Presently we have update=ON. If that is OFF, does it disable only the actual automatic updating but still check if an update is compatible with the server's current Apache version and will show a note there in the vendor page or it will be included in security recommendations? Or does turning update=OFF cause it to not even check at all?