Create SECURITY.md

[zidingz]

A simple instruction for security researchers. Closes #819

[hhaidar]

Thanks again for your help with this. I'm going to talk to my superior about having a better process for handling these kinds of things (perhaps an dedicated email and public key).