web: Add note about security issue reporting