There's no problem putting it into a support ticket system - that's how issues get tracked and Alice going on holiday means things get followed up. But anything security related should be escalated immediately, skipping the typical CS levels. You can't afford to waste the (limited) time/effort of people who can a) help you and b) embarrass you very publicly, by making them fight scripted support responses and non-technical CS staff.
[edit]: grammar