add instructions for adding docs to security