Mostly copied from https://gravitational.zendesk.com/hc/en-us/articles/115015950248-Security-Disclosure