No Confidentiality governance clause

A related note to #13 is that Security and the confidentiality note are at odds. I think the intent of the confidentiality section of the Charter is to remind everyone that there is no expectation of confidentiality within the project by default.

However, confidentiality relationships may happily exist between participants in the project, and the project itself is expected to have information that the project creates confidentiality expectations around - for example a non-public/embargoed security issue.

Read the confidentiality section of the Charter and the related discussion in issue #13 first. Clarify how the security guidance and the confidentiality note should coexist, then update the governance wording once the project’s intended expectations are decided.

Written by the indexing model from the issue text.