add link to Managing Security Sources doc