Note: for historical task protection to remain we need to usurp the /existing/ project used as an acl and create a second project for tagging purposes only. This is in the same spirit as T90491. We currently have [[ https://phabricator.wikimedia.org/maniphest/query/8wTH1EjH3ysd/#R | hundreds of tasks ]] that would be useful for volunteers to follow tagged with #security. Related [[ https://phabricator.wikimedia.org/phame/post/view/187/changes_to_security_team_workflow/ | blog post ]].
[x] Determine #Security access subgroups
[x] Create first subproject of acl*security_volunteer (this will inherit all users)
[x] Create subsequent subprojects and add members as appropriate
[x] Create a new security project for tagging only (#security-related)
[ ] Add #security-related to all exting tasks tagged with #security
[ ] rename #security to #acl*security
[ ] remove #acl*security from all tasks as a tag
[ ] Update Security task type with new ACL
## Add new tag in place of old #security whcih is now an ACL only
### https://wikitech.wikimedia.org/wiki/Phabricator#Run_a_bulk_job_silently_(suppressing_notification_spam)