Hello,

in the description of the mailing lists/bug trackers of sr.ht projects
there is a note:

> Do not report security-related issues here. Email them to
> [sr.ht-security](https://lists.sr.ht/~sircmpwn/sr.ht-security).

with a link to the `sr.ht-security` mailing list page. Since that
mailing list is private, we get a 401 Unauthorized, which is not very
helpful and for new users it might not be obvious how to construct
the email address from that.

I suggest to change the link to point to
`mailto:~sircmpwn/sr.ht-security@lists.sr.ht`