Private Security Email List

[larry mccay]

Seems that we should have a private security email list for knox.

Do we?

http://www.apache.org/security/