update to security doc