Just in case someone is AFK, it seems better to advice to mail all of
us.

Also, whenever someone receives a security issue, they will email the
other maintainers. If it is reported to all maintainers it seems
simpler.

Signed-off-by: Rodrigo Campos <rodrigo@kinvolk.io>