Document how to report potential permission or security issues
Until this is documented properly, you can use the "confidential" checkbox when opening an issue here. This will ensure nobody apart from the maintainers will access your bug report.
To upload designs, you'll need to enable LFS. More information