Comment 8 for bug 1287219

If this is only likely to get "fixed" in configuration samples, we probably shouldn't leave the bug report private while that work is going on. Also it doesn't sound like something the VMT is likely to release an advisory on (though the OSSG may be interested in documenting the risks represented in the sample, so we can ping them if this really is just a sample config issue).