Well, it seems to be working OK by just dropping it into /mu-plugins/ folder BUT, not being a cryptographer, I could be kidding myself I have done something positive for the security of my site, because I have no way to tell if it's working or not.