looks like GitHub made our "report security issue" button redundant: <img width="844" alt="image" src="https://user-images.githubusercontent.com/239422/58628682-b0129500-82da-11e9-9a25-11c0828d9e16.png"> Todo: Remove one of them.