SECURITY information for server

The PR to fix this has not been integrated. You can manually fix it by following this guide: