added some extra clarifications to the SECURITY file.