Created the auto-fix user callout that shows up in the project security
dashboard (unless previously dismissed).