security_events: Add AMI documentation; output optional fields