Bug - Security Service Title doesn't decode entities properly on edit

Create a security policy with a & symbol in the title. Save and close then edit. The input box will show the html entity instead of the & character.