There's a potential security hole in the task-controller as it stands. Based on the discussion on general@, removing task-controller from the 0.22 branch will pave way for 0.22.0 release. (This was done for the 0.21.0 release as well: see
MAPREDUCE-2014.) We can roll a 0.22.1 release with the task-controller when it is fixed.