security doc: Formatting fixes

asciidoc requires a blank after backticks. Working around the plural form of the class. Also replaced a but with must to make more sense. Removed some duplication.