- SECURITY_* -> ZAP_*
- document ZAP features in README.md