Add Prem's security reporting talk proposal

We all have been through this; Someone uploaded a exploited gem to RubyGems just to show that RubyGems has a security issue, someone posted an issue on GitHub just to get an attention from the core team members, someone post a link to a Gist on how to exploited something on Hacker News just to prove that it's possible, or someone just cut a security release without a proper security advisory on Friday evening when everybody left their work.

As a community, I believe that we can be better than this. We can all learn together on how to do security reporting and disclosing in a right way. Be responsible, polite, and respectful to everyone so that we're not ruining anyone's day when a vulnerability has been exposed.