[Kata-hypervisor] QEMU security process

Hi all, I had to disconnect from yesterday's call before the QEMU security discussion. As a starting point, perhaps Justin and others can refer to: - https://wiki.qemu.org/SecurityProcess (QEMU security process) - https://oss-security.openwall.org/wiki/mailing-lists/distros (linux-distros mailing list, which is how QEMU contacts downstream vendors) and ask for clarifications and missing points. Thanks, Paolo