document security and upgrade doc for 0.2.8