Clarify who can subscribe to the security list.
diff --git a/src/md/community.md b/src/md/community.md
index 0b2b781..baa1dc3 100644
--- a/src/md/community.md
+++ b/src/md/community.md
@@ -7,7 +7,7 @@
- [users@apex.apache.org](http://mail-archives.apache.org/mod_mbox/apex-users/) is a discussion forum for people who want to build applications and/or solutions using Apex. [subscribe](mailto:users-subscribe@apex.apache.org?subject=send%20this%20email%20to%20subscribe), [unsubscribe](mailto:users-unsubscribe@apex.apache.org?subject=send%20this%20email%20to%20unsubscribe), [ponymail](https://lists.apache.org/list.html?users@apex.apache.org), [nabble](https://s.apache.org/apex-users), [archives](http://mail-archives.apache.org/mod_mbox/apex-users/)
- [dev@apex.apache.org](http://mail-archives.apache.org/mod_mbox/apex-dev/) is for people who want to contribute code to Apex. Traffic on the list is generally high and includes JIRA notifications and code review comment. [subscribe](mailto:dev-subscribe@apex.apache.org?subject=send%20this%20email%20to%20subscribe), [unsubscribe](mailto:dev-unsubscribe@apex.apache.org?subject=send%20this%20email%20to%20unsubscribe), [ponymail](https://lists.apache.org/list.html?dev@apex.apache.org), [nabble](https://s.apache.org/apex-dev), [archives](http://mail-archives.apache.org/mod_mbox/apex-dev/)
- [commits@apex.apache.org](http://mail-archives.apache.org/mod_mbox/apex-commits/) is for commit messages and patches to Apex. [subscribe](mailto:commits-subscribe@apex.apache.org?subject=send%20this%20email%20to%20subscribe), [unsubscribe](mailto:commits-unsubscribe@apex.apache.org?subject=send%20this%20email%20to%20unsubscribe), [ponymail](https://lists.apache.org/list.html?commits@apex.apache.org), [nabble](https://s.apache.org/apex-commits), [archives](http://mail-archives.apache.org/mod_mbox/apex-commits/)
-- [security@apex.apache.org](mailto:security@apex.apache.org) is for reporting security related issues with Apex. It is a private list to discuss security related issues. Please post potential security vulnerabilities to this list so that they can be investigated and fixed before the vulnerabilities are published to the public. You can post to the list without subscribing to it.
+- [security@apex.apache.org](mailto:security@apex.apache.org) is for reporting security related issues with Apex. It is a private list to discuss security related issues. Subscription is limited to PMC members and to committers that actively work on security issues. Please post potential security vulnerabilities to this list so that they can be investigated and fixed before the vulnerabilities are published to the public. You can post to the list without subscribing to it.
## Events
