Old Drupal 8 security policy for minor releases