Added Security Policy

SECURITY.md

@@ -0,0 +1,19 @@
+# Security Policy
+
+If you discover a security issue, please bring it to our attention right away!
+
+## Reporting a Vulnerability
+
+Please `DO NOT` file a ~~public~~ issue to report a security vulberability.
+
+```
+Send your report PRIVATELY to salmen at hey dot com
+```
+
+This will help ensure that any vulnerabilities that are found can be
+[disclosed responsibly](https://en.wikipedia.org/wiki/Responsible_disclosure) to any affected parties.
+
+## Supported Versions
+
+We will provide security updates for any version that was released within the last 12 months. We encourage all users to
+keep their installations up-to-date.