add bandit security tests

[thraxil]

Bandit finds a couple issues (see tox -e bandit for the report). Those should be addressed separately. Once everything is passing, we can add it to the Github Actions workflow.