- create_task.py: add MITM risk warning to --insecure flag help text; common home-user pattern (self-signed cert) exposes API key in transit - install.sh: replace bare systemctl restart with explicit failure check that prints a recovery hint when middlewared fails to start post-install