Here are the current references for security:
Client credentials for a Google APIs project
Enable Zookeeper SSL
Enable MySQL SSL
HTTPS for Apache Tomcat with OpenSSL
Engine Audit
The following are the current OAuth security configurations: