security doc: Formatting fixes

asciidoc requires a blank after backticks. Working around the plural form of the class. Also replaced a but with must to make more sense. Removed some duplication.
Merge pull request #7 from ecki/patch-1

security doc: formatting fixes