Today I participated in the totally clandestine process of deploying fixes to zero day vulns in two separate, and totally unrelated, open source projects. We can't keep doing things like this.