This will result in a 404 when running an unreleased security patch
while still allowing users to find the commit when it is made available.