[cosmo-dev] 0.10 security bug discovered (and fixed)

[Jared Rhine]

> Even if we stick these in an EOD 0.11 tomorrow, we'd still need to  
> qualify that 0.11 which seems like it would take more time than  
> 0.10.1.   I think the real question is how comfortable Jared Rhine  
> feels with a hot update to hub asap.

I'm inclined to update Hub to tip of 0.10 branch to pick up this  
change.  I'm running out the door, but I'll do this when I get back.

-- Jared