We should be able to reference and update AppHarbor.Web.Security using NuGet. Ideally, the package should automatically generate keys for Web.config when installed.