Bug 23652: Added a non-normative section on security mitigation and privacy management