Added a specification for security considerations

Added a spec to document security considerations arise in the
design discussions.