Update security.rst to note that we statically link OpenSSL now.

s/bugfix/bug fix/