Add document outlining security practices.