@npd @sandro Seems like a good idea. (We did raise AP to the w3c security list much earlier, almost exactly a year ago on Wed 28 Sep 2016, but we didn't get a response then.)