Important security update

I think this is fine. Just merge.