The Drupal project encourages security researchers to follow [responsible disclosure](http://www.drupalscout.com/knowledge-base/what-are-full-disclosure-and-responsible-disclosure) and this usually works. Sometimes, though, people will post a security issue to the support forum or the public issue queue or whatever. Now that Drupal.SE exists people post questions or vulnerabilities here, sometimes, which is not ideal.

1. It seems like we can get drupal.SE site admins to 'delete' a post which puts it into a hidden place for a while. That seems OK. Tim Plunkett has offered to do this if there are posts which disclose a security vulnerability. Is deleting the right thing? Is there some way to ask all drupal.SE admins to temporarily delete a post so I don't have to find Tim specifically?
2. It would be **awesome** if the stackexchange site could say "It looks like this question might be a security issue, consider if you should report it following the process as <http://drupal.org/node/101494>"