Put security issues in "issues". Do not include password, especially if there are multiple user accounts on the OS. Do not share personal information. Name the issue 'Security Issue: your issue here.' (replace 'your issue here' with the actual issue.