Grabbing this one. In a PR: https://github.com/mozilla/fjord/pull/528
Landed in master: https://github.com/mozilla/fjord/commit/c08a1a8c20e8a3a27dbfae7e72a636052b9aca64 Pushed to prod just now. Closing this out as FIXED.
These bugs are all resolved, so I'm removing the security flag from them.