Solution: add SECURITY.md with supported branches and maintainers public keys for private communications