updated security doc