Sign security.txt

From comment:6:ticket:25131:

I suggest we use the tor-security list key, or some other key that many people trust.