Update SECURITY doc for bucket types