Fix typo in security doc