[Haskell-cafe] security update practice?