Not applicable to Archy project?
Guess if the security policy question still stands it should be discussed
between RCHI members or on dev list.
We still can create bug reports for any specific security issues/actions in
boundaries of Archy project.