Security at TaxPlane

Placeholder — real copy needed before launch (spec §9).