Some services (namely commits.webkit.org and ews-build.webkit.org) have remotes which are not defined in our project manifest. These services often know what the security level of a given remote is, and should be able to specify the security level for their known remotes when configuring their hooks. Note that we should never allow a service or contributor to override an existing security level, there are not circumstances where a tool or individual would correctly set such an override.