message: Add guidance for reporting security issues
diff: @@ -92,6 +92,18 @@ comment letting us know that there's new stuff to review.
  If the pull request review goes well, a project maintainer will merge your
  changes. Thank you for helping improve Bond!
  +# Reporting Security Issues
  +
  +Security issues and bugs should be reported privately, via email, to the
  +Microsoft Security Response Center (MSRC) at
  +[secure@microsoft.com](mailto:secure@microsoft.com). You should receive a
  +response within 24 hours. If for some reason you do not, please follow up
  +via email to ensure we received your original message. Further information,
  +including the [MSRC
  +PGP](https://technet.microsoft.com/en-us/security/dn606155) key, can be
  +found in the [Security
  +TechCenter](https://technet.microsoft.com/en-us/security/default).
  +
  # Code of Conduct
  This project has adopted the
  