Security Team as a distinct role

If a "security committer" potentially has privileges that exceed those normally granted to committers, then we should add something about it to the EDP.