Document KOpenPGP mitigations

pgpainless-core/src/main/kotlin/org/pgpainless/policy/Policy.kt

@@ -36,6 +36,14 @@ class Policy(
             NotationRegistry(),
             AlgorithmSuite.defaultAlgorithmSuite)
 
+    /**
+     * Decide, whether to sanitize public key parameters when unlocking OpenPGP secret keys.
+     * OpenPGP v4 keys are susceptible to a class of attacks, where an attacker with access
+     * to the locked key material (e.g. a cloud email provider) might manipulate unprotected
+     * public key parameters of the key, leading to potential secret key leakage.
+     *
+     * @see [Key Overwriting (KO) Attacks against OpenPGP](https://www.kopenpgp.com/)
+     */
     var enableKeyParameterValidation = false
 
     fun copy() = Builder(this)