Update and rename waf.md to sec.md