Perhaps another question for @iballou to take to the Candlepin folks: Candlepin / Apache artemis vuln fp?