/vulnerability_feedback leaks metadata and comments on vulnerabilities
when the project is public
All of the data in  vulnerability_feedback records should be restricted
to a dev role and above