Updated security section

this is still not final, but I got a dressing-down for using a naive
implementation when I should know better ;)