cf. https://www.reddit.com/r/CrowdSec/comments/1gvby56/why_are_alertsdecisions_being_shown_for_something/