Restructure security section.

Add note about SSL no bump.