SECURITY.md: we don't support 2.0 anymore, bump to 2.1