This bug is not currently tracked.
To avoid malicious authors monitoring bugzilla for blocklist requests, we'd like to make the component private by default. We'd be opening the bug once the block has been pushed.
Bugzilla does not have the ability to make new bugs private by default based on component selected, only based on product. We would need to add this functionality are put in some code to look for that component and manually set the permissions.
After talking internally and to the bmo team, we settled on the following:
Could we create a new security group for blocklist requests (owner: me, admin: Fallen) and set that group by default in the custom form (https://bugzilla.mozilla.org/form.blocklist)?
blocklist-requests group created and added you and fallen to the group with admin rights. You can add others to the group by going to https://bugzilla.mozilla.org/editusers.cgi
Working on updating the custom form now.
Merged to master.