adding security reference to documentation