[SSSD] How are security issues related to sssd reported

[Gordon Messmer]

What is the best way to contact sssd developers to discuss security 
issues privately, in the event that a flaw is discovered?