security docs enhancements

This PR replaces #1397.