security doc: formatting fixes

asciidoc requires a blank after backticks. Working around the plural form of the class. Also replaced a but with must to make more sense. Removed some duplication.

Signed-off-by: Bernd Eckenfels