patching now
it'll be nice to see if SecUpd 2018-003 is as 'fun' to install as SecUpd 2018-002 was on my mid-2012 MacPro (it took about a month, and the story is just too long to relate. . )
at least now that MoJave is vers '02, that means I might try it on a minor mac somewhere - Pournelle's rule?