New instructions for reporting security vulnerabilities

Closes #37.