Add a definition of the security model to the documentation.