readme: clarify how to contact for security
Make it clear how to contact for security-related issues. Hopefully
prevents a naive public disclosure via a GitHub issue or other channel.
@@ -120,15 +120,16 @@ testing.
## Policy for Security Disclosures
The security of Firecracker is our top priority. If you suspect you have
-uncovered a vulnerability, get in touch with us; we will immediately prioritize
-your disclosure. More details on our process for dealing with this type of event
-can be found in [our security policy document](SECURITY-POLICY.md).
+uncovered a vulnerability, contact us privately, as outlined in our
+[security policy document](SECURITY-POLICY.md); we will immediately prioritize
+your disclosure.
## FAQ & Contact
Frequently asked questions are collected in our [FAQ doc](FAQ.md).
You can get in touch with the Firecracker community in the following ways:
+- Security-related issues, see our [security policy document](SECURITY-POLICY.md).
- Chat with us on our
[Slack workspace](https://tinyurl.com/firecracker-microvm). _Note: most of the
maintainers are on a European time zone._
