security.md: minor typo in example

I just played through the example, and in fact the correct command is "jaas:realms" instead of "jass:realms"