add threat model documentation

[andreeaflorescu]

The input of vm-fdt is considered trusted. This needs to be explictly mentioned in the threat model documentation.