Introduces a security policy describing how to responsibly report memory safety and other security vulnerabilities.