Update security.rst

Correct file path mentioned in comment