Add boilerplate security policy.