Bug 26023: Properly secure the cashup action for libraries