DB Changes

No db schema changes. Some configuration items will be created.

Security

The NFS Store url, path and some other information are exposed to the end user in the response to getUploadParams. This is done so that agent gets all the information required to download the template with the POST request. One option can be to encrypt the entire JSON and then send it across as part of response
The Apache web server will only accept upload requests over HTTPS
Proxy between apache and agent is internal to the SSVM. Hence no security threat here.
SSVM PSK location can only be accessed by admin. Hence no security threat.

...