Move security requirements to sysapps/notes/security-requirements

As requested - https://github.com/sysapps/sysapps/issues/57