email_sec should be a (configurable) loadable module

Currently, shells just execute email_sec.js directly. This is not aligned with how all the other loadable modules that make up sub-menus of shells are done.