Update security.md

Add escape character for correct rendering