Would it be reasonable to CC security-related bugzilla tickets here? Currently it's not possible. - J<