Update security docs for new setup