Add security disclosure process

[hakusaro]

Hi! Seeing #81, it inspires me to tell you that GitHub has a new security vulnerability reporting system. You can setup private reports and let users create private forks of public repositories to fix issues, that way fixes go out before the issue becomes public.

I'd be more than happy to help you with this! Please let me know if you'd like any assistance.