Problem description
The chapter entitled "Security" in the new document is based on Sections 10 and 11.6 - 11.7 of current guidelines.
@tlohmar proposed updates and clarification in the review of #441

Expected action
Security chapter in API Design Guide (the new document) to precise requirements and avaid redundancy.

Additional context
Coordination with ICM WG may be needed.