Nobody knew what would happen if the server rebooted, and the script had no documentation or living owner. The risk of breaking the company's entire invoicing operation outweighed the perceived urgency — until the security exposure became undeniable.
