Thanks for setting up the wg-stable alias in bug 591308. We're now operational and would like more restrictive permissions on the alias to restrict the alias to the members of the WG (that are currently listed in the alias).
done via facls for user in $(cat wg-stable); do setfacl -m "u:${user}:rw-" wg-stable; done
also chmod g-w wg-stable