New Merge Policy for an always-green hydra

Just in case, I support permanently marking ghostscript as insecure and oppose its deletion.

(It is clearly unlikely to be safe for malicious files in forseeable future, and it is also quite a useful tool for processing files of known-benign origin)