Update play11.md

Added section on separation of concerns for security. This is generally a good idea and codified in DCPA-1 or NIST SC-2 Application Partitioning.