* Not affect strings in mail/locales and editor/ui.
* Not affect idl interfaces (which would break binary compatibility).
* Land on trunk before requesting approval. Preferably to have some time baking before approval is requested.
* Be accompanied by a risk assessment as to the risk the patch poses and the reason we need to take it for the 3.0.* security releases when the approval is requested.