Comment 15 for bug 1989008

I missed setting the security advisory task to won't fix state when we decided on this as a security hardening opportunity, so have done so now (as it won't have any advisory issued).