the following changes have been pushed to bugzilla.mozilla.org:
-  Mirror all BMO groups as Phabricator projects and keep them in sync
-  double-check new accounts with BMO to catch and notify of username squatting
-  Port OrangeFactor extension to treeherder
-  Use tct (tocotrienol on npm) to encrypt bugmail
discuss these changes on mozilla.tools.bmo.