incident submit: take a risk vector as optional third argument