add security notice