Qca-tls is in security, openssl is in security, gnutls is in security... so for consistency's sake, this one should be in security as well. Devel as secondary category is a good idea though.