Added notes on security/xacml