Remove security from the RFC.
Mention the lint in the detailed design.
Write up the upstream FFI issue a little.