We have a mailing list for security discussions. We also need a chat for it IMO. Right now discussions are done privately which means they are not public with those who are part of the security list.
I’m proposing the creation of #xwiki-security matrix room which will be closed and on invite. Same rules are for joining the security mailing list.