Improve bug reporting documentation, and mention pspp-security list.