security docs enhancements

This PR replaces #1397.
Redundant?  `autofunction` already [sniffs the signature](http://sphinx-doc.org/ext/autodoc.html#directive-autofunction), unless it is hidden by a decorator.