This would mean that we need to update branches/2.0 to 2.0.2-SNAPSHOT
Copy the existing tag over and apply the security fixes.Repsin and release.
Personally, I vote for option 2.Based on my experience, closing out the SNAPSHOTs is and introducing little changes will cause us to restart the release process.