WIP: Add Java client security doc