Got it. It turns out that in my Solr schema I had set the default value for the various token fields to __no_security__ when the plugin was actually expecting __nosecurity__ (without the extra underscore in there). Everything works as expected now and Fred and George are happy. And Bert too! :-)
Phil
