doc: add security section to README.md