Doing security releases sucks (don't worry, I'm just thinking back to the most recent Rails release). Was thinking about writing a blog post that explains the challenges, but even thinking about it makes me tired