We should have a security page that has a link to my email, maybe one that goes to one other person too, and a PGP key.