Add initial security policy document (#46)

Add initial security policy document (#46) #40