Invite reporter to submit an issue to the tracker directly

Hello {name},

The Drupal Security team now accepts security reports via the issue tracker at security.drupal.org. Please submit your issue directly at https://security.drupal.org/node/add/project-issue/PROJECTNAME

As usual, please keep the issue confidential until we can announce a fix. You will be given credit in any announcement about the issue.

Regards,
{your name} on behalf of the Drupal Security Team.