[!] Milestone assignment security