It seems wise to include _some_ form of guidance on what we know about problems with certain (versions of) implementations. [ci skip]
Uses the new Gitlab security documenting features/"standard" to explain our security non-policy.