Romain, I don't see why you merged these reports. The first one is about a policy violation, while the second one is a data loss issue. I agree with the downgrade of #409434 from serious, but I believe that #388616 should be serious.