Use Full Disclosure strategy and open public issue.

Project is in early development stage so "Coordinated vulnerability disclosure" is redundant.