Security checklist

Ready for merge. Reviewed and approved.