Starting to divide security cookbook up

Identifying the main bits that the security cookbook
should handle