@wbreza can you setup sometime with the devdiv security folks and include @trangevi from the extension POV.
