docs(security): add security doc

WIP
Hm...I wonder how one would achieve this. Do you have something specific in mind ?