Add a note to work on dev if it is security related

Merged Ernst van Nierop requested to merge evn-security-work-on-dev into master