NEWS: add note on security API changes

Signed-off-by: Pierre-Alexandre Meyer <pierre@mouraf.org>