Mark CVE-2018-20669 as unimportant

For the time beeing, asked for proper rejection to MITRE and we can
later on retire the CVE completely. Ben has explained on the
oss-security mailinglist why this no vulnerability.