Comment 4 for bug 1256049

@Jeremy Stanley: Yes, this will affect Havana and Grizzly stable branches, I'll add them as targets above.

@Steve Baker: Yep, good points, my approach has been treating instances as implicitly untrusted (since there's no way to know if they are compromised or not). If you feel this is not serious enough to warrant srt process, we can just use the normal workflow, but I wanted to discuss in a private bug before assuming that would be appropriate.

I'll provide patches for Havana and Grizzly later today.