[dev] security doucmentation for OTRS