docs: update security scope