Add the Product Security Team as the security contacts for the main repository and they can use the OWNERS files in each subsystem/dir to find the correct owners. Signed-off-by: Jess Frazelle <acidburn@microsoft.com>