Update security roadmap for 1.3.0