make 'Security and privacy' a top-level section; tidy