added some more information about the security process
Merge pull request #2696 from fabpot/security-tweaks

added some more information about the security process
Merge branch '2.1' into 2.2