Add draft project security threat-model document

Add draft project security threat-model document #589