How do you prioritize security updates against operational uptime requirements at 22nd Century Technologies?