Merge pull request #9855 from ewindisch/sec-doc

Improve security doc