add security note