In the last few weeks I see two instances of "secruity:One or more security items fixed" noted in release notes. Can we change this to where SM can advise us on if this is a Low, Moderate, High or Critical  security fix designation and possibly a CVE? That helps with our change control process,identifying criticality of issue and if the security issue is internal facing or external facing (I.e. via IIS/80/443) or some other port so we can adjust and monitor accordingly. The 'recommendation' note is quite vague. Thank you