Disclose resolved confidential issues
Note sure who is in charge for this, feel free to move.
technical/security issues that have been resolved should be disclosed. A onetime bulk change is required (needs privileged account I guess) to deal with the backlog and maybe regularly revisit this from time to time.