This is adapted from firecracker's security policy document. Signed-off-by: Andreea Florescu <fandree@amazon.com>