Add security note to docs.