Fedora Project OpenID Security issue