clean up security guide: his => their [ci skip]