Update CONTRIBUTING.md

Disclosure policy should really be up here, so fixing that.

CONTRIBUTING.md

@@ -89,6 +89,8 @@ required.  You're now live!
 Reporting A Bug
 ---------------
 
+Ansible practices responsible disclosure - if this is a security related bug, email security@ansible.com instead of filing a ticket or posting to the Google Group and you will recieve a prompt response.
+
 Bugs should be reported to [github.com/ansible/ansible](http://github.com/ansible/ansible) after 
 signing up for a free github account.  Before reporting a bug, please use the bug/issue search 
 to see if the issue has already been reported.