John is in security project and must be able to publish GLSAs which require moderator permission for gentoo-announce@lists.gentoo.org.
He seems to be already there.