Added security considerations document

[darrelmiller]

In order to register a media type for OpenAPI, it is necessary to have a security considerations section. Ideally this section would be in the specification itself, but for the moment, having it in a separate document should be sufficient. Closes #3037

[darrelmiller]

@asbjornu Thanks! Committed your changes.