Use Full Disclosure strategy and open public issue.

Project is in early development stage so "Coordinated vulnerability disclosure" is redundant.

No formal security audit were performed.