pre-commit: add bandit hook and config file

.bandit

@@ -0,0 +1,2 @@
+[bandit]
+exclude: /test

.pre-commit-config.yaml

@@ -3,8 +3,14 @@ repos:
     rev: 3.7.9
     hooks:
     -   id: flake8
+        exclude: '^(fido2|test)/_pyu2f/.*'
 -   repo: https://github.com/psf/black
     rev: 19.10b0
     hooks:
     -   id: black
-exclude: '^(fido2|test)/_pyu2f/.*'
+        exclude: '^(fido2|test)/_pyu2f/.*'
+-   repo: https://github.com/PyCQA/bandit
+    rev: 1.6.2
+    hooks:
+    -   id: bandit
+        exclude: ^test/