#857: Added some docs about Tomcat security