Would it be viable for there to be a community security patches project?