I wonder wheter the new send-pr category "security" actually
is functioning or not.

I have sent (and after a couple of days resent) a PR with the security
category, but I never got an acknowledgement, and it has not appeared in
the problem database -- please investigate and/or explain... 

Anyway, my problem was quite simple: recently /usr/src/etc/aliases was
augmented with a new alias (decode) that /etc/security will complain about
each day, which is rather silly. 

regards
Erik Bertelsen