Re: critical path security update policy