Document an explicit security decision