add security-trust draft