Changed security doc for vacation requests.