It seems wise to include _some_ form of guidance on what we know about
problems with certain (versions of) implementations.

[ci skip]

Uses the new Gitlab security documenting features/"standard" to explain our security non-policy.