sorry @keul - i just noticed that for certain functionality (i.e drag and drop re-ordering in folder_contents) you'll want to add plone4.csrffixes to your instance eggs section.
otherwhise re-ordering is simply not working. another point was cut and paste (you'll get a csrf warning w/o csrffixes being explicitly added)
because of problems like these some people chose to simple block zmi access and stay with plone.protect 2.X
(see Release process improvement)