vhost: add security model documentation