Note that LuaSec is actually optional, and will be loaded on-demand when the first request using the https:// scheme is issued.