[opensuse] Should openSUSE review it's Security Policies?