You can also whitelist procedures and functions in general to be loaded using:
Neo4j 3.2 introduces user defined aggregation functions, we will use that feature in APOC in the future, e.g. for export, graph-algorithms and more, instead of passing in Cypher statements to procedures.
Please note that about 70 procedures have been turned from procedures into user defined functions. This includes,
apoc.date.* apoc.number.*, apoc.coll.*, apoc.map.* and some more packages. See, this issue for a list.