How do you handle a subtle pattern in a pull request that could lead to a security vulnerability?