Details on how to report security vulnerability via encrypted email

[trask]

Following up on open-telemetry/.github#18, we should document more details somewhere about:

provide instruction on how to report the vulnerability using an encrypted message