initial draft for a security disclosure PSR