Start a security file; #576

I went for a text file in the site root.