doc/Security.md: add basic documentation of proposed security model