add documentation for SecurityDirectives

(partially copied over stuff from the old wiki)