bugbot adjusting priority

There have been no further discussions on the libvirt-security list, and I cannot access the Redhat bug either, so don't know the status of the embargo.

WRT affected products, I think all are affected if customers are using any of the network-based block drivers *with* auth credentials. But as noted in #5, I don't think there is much we can do about it beyond "making sure users are aware
of the limitation as it stands".

Including by reference:
https://www.redhat.com/archives/libvir-list/2011-November/msg00853.html

Upstream is aware of this limitation. Not fixable directly. Users should exercise caution regarding ceph IDs leaked on the command line and adjust their security posture accordingly.