NEWS: Move enable_secure_tunable from 2.39 to 2.40.

NEWS

@@ -21,6 +21,11 @@ Major new features:
   by _GNU_SOURCE, or by compiling with the GCC options -std=c23,
   -std=gnu23, -std=c2x or -std=gnu2x.
 
+* A new tunable, glibc.rtld.enable_secure, used to run a program
+  as if it were a setuid process. This is currently a testing tool to allow
+  more extensive verification tests for AT_SECURE programs and not meant to
+  be a security feature.
+
 Deprecated and removed features, and other changes affecting compatibility:
 
   [Add deprecations, removals and changes affecting compatibility here]
@@ -103,11 +108,6 @@ Major new features:
   exp, expf, exp10, exp10f, exp2, exp2f, expm1, expm1f, log, logf,
   log10, log10f, log1p, log1pf, log2, log2f, sin, sinf, tan, tanf.
 
-* A new tunable, glibc.rtld.enable_secure, used to run a program
-  as if it were a setuid process. This is currently a testing tool to allow
-  more extensive verification tests for AT_SECURE programs and not meant to
-  be a security feature.
-
 Deprecated and removed features, and other changes affecting compatibility:
 
 * The ldconfig program now skips file names containing ';' or ending in