Add security items to todo list in README