Please set up a security policy

Hello, NetworkManager developer here. I need to report a security vulnerability that cannot be disclosed yet, but Github doesn't allow to create confidential issues. Can you please create a security policy (see the "Security" tab) so I know how to communicate it?