clarify security policy

Author: webdev03

SECURITY.md

@@ -4,7 +4,10 @@
 The only supported versions are the ones in this repository.
 
 ## Reporting a Vulnerability
-You can send me a Scratch message if it is really minor and can be fixed really fast.
-If it's more than really minor, please send an email at scratchinforeportvuln [at] gmail [dot] com
+Please send an email at `scratchinforeportvuln [at] gmail [dot] com` to discuss your vulnerability.
 Please do not use this address for things not related to scratchinfo security vulnerabilities.
+**Please do not discuss your vulnerability publicly until it is either resolved and a patch has gone out or it is not a vulnerability according to Scratchinfo.**
+If you have got a patch, please send it over in that email.
+
+These rules are all here to protect the users of Scratchinfo.
 If after 4 weeks I don't respond to your vulnerability, please make an issue in this repository.