Does nginx still force you to recompile the program to get access to the web application firewall? I remember this being a sticking point years ago when evaluating the product.