Add email for security policy

[james-d-elliott]

The security policy as it stands is effective. However it would be a relatively helpful improvement to include an email contact method in addition to the current methods.