add security design doc