Security: Please enable Private Vulnerability Reporting

I've identified a security vulnerability in the proxy relay functionality. This repository does not have a SECURITY.md or Private Vulnerability Reporting enabled, so I have no way to report it privately. Could you please enable Private Vulnerability Reporting (Settings → Security → Private vulnerability reporting) or provide a security contact email? I'd like to follow coordinated disclosure.