Change, Vulnerability, and Patch Governance