Adds additional security docs

Documents the reason behind valid_abs_path untainting of mount_point (code comment).
Documents the importance of specifying lfs_binary in sudoers rules (help docs and code comments)
A few miscellaneous security-related code comments here and there.