Establish a security process

[ansasaki]

We should create a well defined, step-by-step process on how to deal with security issues.
A good example from a project I contributed to is from libssh:

https://www.libssh.org/development/security-process/