[pdpi]

They have a mechanism to pay external developers, and they want to use that instead of creating a vulnerability-specific mechanism.