SECURITY.md

In case you do not want to publicly report a security issue, write an email with a detailed description of the issue to [email protected].