security-model: PHOENIX-7968

[Andrew Purtell]

I have attempted to describe the Phoenix security model for use by Apache
Security and others, including ourselves, in triaging vulnerability
reports. Please have a look at https://github.com/apache/phoenix/pull/2583

-- 
Best regards,
Andrew