Added clarification to security docs