add security docs