Moving security questions to config.
Added a note for admins.