Option 1 is to silently patch it in RC1 while we work on coordinated disclosure with passlib / fix in Diablo.
Option 1 is to silently patch it in RC1 while we work on coordinated disclosure with passlib / fix in Diablo.