Add documentation about SECURITY_MSG configuration variables.

I had trouble figuring out how to override the default messages, so I added some information to the configuration documentation about SECURITY_MSG configuration variables.