[opensuse-project] Do legal related bugs need to be private?