doc: prepare security process for vulnerabilities