SECURITY.md

In case you do not want to publicly report a security issue, write an email with a detailed description of the issue to jonas-lt@live.dk.