[WIP] database security overview

Curious if we want/need to create a document like this. Or if it would be better as a blog post