added some more information about the security process
Merge pull request #2696 from fabpot/security-tweaks

added some more information about the security process