To vex or not to vex?

Management is adamant on fixing all CVEs, even the unfixable and unreachable/un-executable ones. i am wondering if i should just tag them with a vex and move on. What do you fine folks do for these? submitted by /u/-Devlin- [link] <a href="https://www.reddit.com/r/devops/