Add SECURITY.md (Fix #328)