Add section on security

We should have something on security. And it just didn't fit anywhere else. We'll have to gradually build it out.

We need something for the additional text in the ToC, any ideas?

(btw, I tagged 1.0, so it's easier to diff all the new stuff when we're sending the email newsletters)