chore: document security policy for IDM messages between host and guest

[kaniini]

We especially want to encode that guests are disallowed from making requests from the host for obvious security reasons. This does not mean that guests might not make some kinds of requests from the host, but the list of allowed requests should be narrow and documented since we consider guests to be untrusted workloads.