[opensuse-factory] security update policy