Make sure applyTransform is run in query mode

[hunterhacker]

For performance and safety. Then document the approach in the wiki.

Also, should the user doing the apply work have eval/invoke perms or not if they want to escape the jail?