`per_listener_settings true` must come before other security settings.

Produce error if this is not the case. Closes #1164, thanks to
momoskitto.