If you discover a security vulnerability, we'd appreciate a non-public disclosure. Developer can be contacted privately on the jamacku@redhat.com.